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(57)Abstract: 

PROBLEM TO BE SOLVED: To provide a digital evidence camera system where 
evidence capability of a digital image is enhanced and an encrypted key is managed at a 
very high security level. 

SOLUTION: The digital evidence camera system detects falsified image data obtained 
by photographing an object with a camera and consists of a camera section 50-1 
provided with an image pickup means 60 that photographs an object and with a MAC 
generating section 1 1 that generates falsification detection data (MAC) from image data 
by photographing by using a secret key set in advance and of a falsification check 
device 101 that uses a public key corresponding to the secret key to decode the data 
MAC and checks whether or not the image data are falsified based on the decoding 
result. 
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* * NOTICES * 

JPO and NCIPI are not responsible for any 
damages caused by the use of this translation. 

1 This document has been translated by computer. So the translation may not reflect the original 
precisely. 

2.**** shows the word which can not be translated. 
3.1n the drawings, any words are not translated. 



CLAIMS 



[Claim(s)] 

[Claim 1] The image pick-up section for being the digital of-evidence camera system which detects the 
alteration of the image data which picturized the photographic subject with the camera and was 
obtained, and picturizing a photographic subject, The cipher-processing section which creates the data 
for alteration detection from the image data obtained by the image pick-up using the encryption key 
built in beforehand, the camera to provide and the alteration detection section which detects whether 
said data for alteration detection were decrypted using the decryption key corresponding to said 
encryption key, and said image data was altered based on the result of this decryption — since — the 
digital of-evidence camera system characterized by becoming. 

[Claim 2] The image pick-up section for being the digital of-evidence camera system which detects the 
alteration of the image data which picturized the photographic subject with the camera and was 
obtained, and picturizing a photographic subject, The cipher-processing section which creates the data 
for alteration detection from the image data obtained by the image pick-up using the encryption key 
built in beforehand, The camera to provide and the alteration detection section which detects whether 
said data for alteration detection were decrypted using the decryption key corresponding to said 
encryption key, and said image data was altered based on the result of this decryption, since — the 
alteration supervision mode as which, as for said camera, said image data detects whether it was altered 
or not — in addition, with the secure mode in which encryption to the image data transmitted to said 
alteration detection section from said camera is performed It has the digital-watermarking mode which 
embeds digital-watermarking data at image data, and the normal mode which performs the usual 
photography without using a security function. The digital of-evidence camera system characterized by 
having the mode selection section for choosing the mode of at least one request from these modes. 
[Claim 3] The decryption key storage section memorized in accordance with the 1st decryption key 
corresponding to the 1st encryption key generated by equipment corresponding to the identifier of a 
proper, and this identifier, The decryption key output section which creates the data for alteration 
detection about said 1 st decryption key using the 2nd encryption key, and is outputted in accordance 
with this data for alteration detection, and said 1 st decryption key, A preparation ********** server 
and the decryption key storage section which memorizes said 1st decryption key acquired from said 
decryption key server through means of communications etc., Said data for alteration detection supplied 
from said decryption key server through means of communications etc. are decrypted using the 2nd 
decryption key corresponding to said 2nd encryption key. the decryption key acquisition section 
equipped with the alteration detection section which detects whether said 1st decryption key was 
altered based on the result of this decryption — since — decryption key acquisition / registration 
system characterized by becoming. 

[Claim 4] With the filing Management Department which is the digital image edit system into which image 
data is edited, and does filing management of the image data inputted through the image input section 
while detecting the alteration of image data While decrypting the 1st data for alteration detection 
beforehand given to said image data using the decryption key corresponding to the encryption key used 
when creating this data for alteration detection The alteration detection section which detects the 
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alteration condition of image data by comparing this the 1st decoded data for alteration detection and 
said image data, To said image data from the edited image data to which various image processings were 
performed by the image editorial department which performs various kinds of image processings, and 
< said image editorial department, and the data of the edit hysteresis by said image editorial department 
^ the renewal section of an image file which creates the 2nd data for alteration detection using an 

encryption key other than said encryption key, and adds this to said edited image data — since — the 
digital image edit system characterized by becoming. 



[Translation done.] 



* NOTICES * 

JPO and NCIPI are not responsible for any 
damages caused by the use of this translation. 

1 This document has been translated by computer. So the translation may not reflect the original 
precisely. 

2.**** shows the word which can not be translated. 
3.1n the drawings, any words are not translated. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Field of the Invention] This invention relates to a digital of-evidence camera system, decryption key 

acquisition / registration system, and a digital image edit system. 

[0002] 

[Description of the Prior Art] The photograph analogically recorded on the film and media of the former, 
for example, a camera, and voice are used as what has the certification force in a trial etc. By advance 
of digital technique in recent years, the equipment which records an image and voice as digital data has 
spread. According to such digitization, the advantage which does not deteriorate even if it copies and 
which can be quickly distributed using a communication line in which processing and edit of the contents 
of information can be performed further easily is acquired. However, I hear that that processing and edit 
are easy can alter the contents of information easily by one side, there is, and room to suspect weight 
of the evidence as information is produced. Therefore, in order to enable it to use a digital image and 
voice as a piece of evidence, it is required to have the function to prevent the alteration of digital data 
by a certain approach. The camera which has such a prevention function is called the digital camera of 
evidence. 

[0003] In order to realize this digital camera of evidence, it considers applying the electronic signature 
technique generally used by the communication link etc. Two keys used as a pair are used in an 
electronic signature system. One is called a private key with the key for encryption, and another side is 
called a public key with the key for a decryption. It is enciphered using a private key and digital data is 
decrypted using a public key. Although a tropism function is used on the other hand in quest of a public 
key from a private key, on the other hand, this thing [ asking for a private key ] is mathematical very 
difficult from the public key conversely with the property of a tropism function. While it needs to be 
severely managed so that no men other than an owner can use a private key by any means, generally a 
public key is exhibited so that anyone can use. 

[0004] The approach of alteration detection is a transmitting side and creates the code first called a 
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message digest (Message Digest, following, MD) using a Hash Function etc. from the target digital data. 
If the method of extracting MD from the target digital data is exhibited and there are original data, 
anyone can extract MD. Incidentally, MD has the property in which a value changes a lot, when the 
original digital data differ from the good and known property. 

[0005] Next, extracted MD is enciphered using a private key and he is a message authentication child 
(Message Authentication Code, following, MAC) about this. It carries out and transmits to the other 
party with original data. Here, the public key used as a private key and a pair shall be certainly passed to 
the addressee (an addressee may cross to the 3rd person's hand that what is necessary is just to surely 
have obtained the key). 

[0006] In order to investigate that original data are not altered, first, a Hash Function etc. is used for a 
receiving side from original data, and it asks for MD\ Next, MAC is decrypted using a public key, MD is 
calculated, and it investigates whether this MD and MD' are in agreement. Even if original data are 
altered by the 3rd person, since the 3rd person does not have a private key, he cannot create MAC 
which can be decrypted with a public key, but becomes a different value from MD and MD'. This shows 
that original data were altered by the 3rd person. 
[0007] 

[Problem(s) to be Solved by the Invention] As described above, in order to detect the alteration of 
digital data, an electronic signature technique is applicable. However, when the approach of alteration 
detection which was described above was adopted as a digital camera of evidence, although it did not 
reveal by any means, conventionally, it was not easy to manage this private key on high security level, 
therefore, as for the private key as an encryption key, it was not able to heighten the weight of the 
evidence of a digital image. 

[0008] Moreover, in the case of an image, there is the need of processing a data compression, field 
logging, insertion of a caption, etc. on the property of data, in many cases, but conventionally, by the 
approach of the electronic signature applied to document data, if it changes even when the contents of 
data are slight, it will be considered that data were altered. Therefore, in the conventional electronic 
signature system, required edit was not completed at all on the property of the above image data. 
[0009] The place which this invention is made paying attention to such a technical problem, and is made 
into the purpose The digital of-evidence camera system which can heighten the weight of the evidence 
of a digital image, and can manage an encryption key on very high security level, Decryption key 
acquisition - It is offering a registration system, and even if it edits compression which is further needed 
on the property of an image, field logging, insertion of a caption, etc., it is in offering the digital image 
edit system which can maintain the weight of the evidence of a digital image. 
[0010] 

[Means for Solving the Problem] In order to attain the above-mentioned purpose, the 1 st invention The 
image pick-up section for being the digital of-evidence camera system which detects the alteration of 
the image data which picturized the photographic subject with the camera and was obtained, and 
picturizing a photographic subject, The cipher-processing section which creates the data for alteration 
detection from the image data obtained by the image pick-up using the encryption key built in 
beforehand, Said data for alteration detection are decrypted using the camera to provide and the 
decryption key corresponding to said encryption key, and it consists of the alteration detection section 
which detects whether said image data was altered based on the result of this decryption. 
[001 1] Moreover, the image pick-up section for the 2nd invention being a digital of-evidence camera 
system which detects the alteration of the image data which picturized the photographic subject with 
the camera and was obtained, and picturizing a photographic subject, The cipher-processing section 
which creates the data for alteration detection from the image data obtained by the image pick-up using 
the encryption key built in beforehand, Said data for alteration detection are decrypted using the camera 
to provide and the decryption key corresponding to said encryption key. It consists of the alteration 
detection section which detects whether said image data was altered based on the result of this 
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decryption. Said camera Whether said image data was altered to the alteration supervision mode to 
detect In addition, the secure mode in which encryption to the image data transmitted to said alteration 
detection section from said camera is performed, It has the digital-watermarking mode which embeds 
digital-watermarking data at image data, and the normal mode which performs the usual photography 
without using a security function, and has the mode selection section for choosing the mode of at least 
one request from these modes. 

[0012] The 3rd invention is decryption key acquisition / registration system. To equipment Moreover, 
the identifier of a proper, The decryption key storage section memorized in accordance with the 1st 
decryption key corresponding to the 1st encryption key generated corresponding to this identifier, The 
decryption key output section which creates the data for alteration detection about said 1st decryption 
key using the 2nd encryption key, and is outputted in accordance with this data for alteration detection, 
and said 1st decryption key, A preparation ********** server and the decryption key storage section 
which memorizes said 1 st decryption key acquired from said decryption key server through means of 
communications etc., Said data for alteration detection supplied from said decryption key server through 
means of communications etc. are decrypted using the 2nd decryption key corresponding to said 2nd 
encryption key. It consists of the decryption key acquisition section equipped with the alteration 
detection section which detects whether said 1st decryption key was altered based on the result of this 
decryption. 

[0013] With moreover, the filing Management Department which the 4th invention is a digital image edit 
system into which image data is edited while detecting the alteration of image data, and does filing 
management of the image data inputted through the image input section While decrypting the 1st data 
for alteration detection beforehand given to said image data using the decryption key corresponding to 
the encryption key used when creating this data for alteration detection The alteration detection 
section which detects the alteration condition of image data by comparing this the 1st decoded data for 
alteration detection and said image data, To said image data from the edited image data to which various 
image processings were performed by the image editorial department which performs various kinds of 
image processings, and said image editorial department, and the data of the edit hysteresis by said 
image editorial department The 2nd data for alteration detection is created using an encryption key 
other than said encryption key, and it consists of the renewal section of an image file which adds this to 
said edited image data. 
[0014] 

[Embodiment of the Invention] Hereafter, the operation gestalt of this invention is explained to a detail 
with reference to a drawing. Drawing 1 is drawing showing the digital of-evidence camera structure of a 
system concerning the 1st operation gestalt of this invention, and consists of a digital camera 100 of 
evidence and alteration test equipment 101. The camera section 50-1 of the digital camera 100 of 
evidence has the image pick-up means 60 which consists of a taking lens 1, an image sensor 2, amplifier 
3, A/D converter 4, and the signal-processing section 5. The photographic subject image which carried 
out incidence through the taking lens 1 is picturized by the image sensor 2. The electrical signal 
acquired by this image pick-up is amplified by the amplifier 3, and after being changed into a digital 
signal in the A/D-conversion section 4 and performing signal processing predetermined in the signal- 
processing section 5, it is memorized as image data in an image memory 6. The image data memorized in 
this image memory 6 is displayed on the image display section 7 if needed. 

[0015] The image data memorized in the image memory 6 is changed into the graphics format of criteria, 
such as JPEG and TIFF, in the file-format-conversion section 8. Thereby, the file format by which the 
data of header information were added to image data is created ((A) of drawing 2 ). Next, in MD creation 
section 9, MD is created by applying predetermined functions, such as a Hash Function, to the data of 
the whole also including image data or a header ((B) of drawing 2 ). Next, in the MAC creation section 1 1, 
MAC is created by enciphering MD using the private key Kprivate (camera) memorized beforehand in the 
private key memory 10 ((C) of drawing 2 ). Next, at the header Records Department 1 1, created MAC is 
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stored in an image header ((D) of drawing 2 ). At the filing Management Department 13, file management 
to the image file of the file format created by doing in this way is performed. 

[0016] Such an image file demounts by control of the storage control section 15, and in order to detect 
whether it was altered while having been transmitted through the communication line 16 by control of 
the communications control section 14 while being memorized and carried by the possible storage 17 or, 
alteration detection equipment 101 is used. 

[0017] That is, the image file memorized by the storage 17 with which alteration test equipment 101 was 
equipped is read to the filing Management Department 19 by control of the storage control section 18. 
Or the image file concerned is sent to the filing Management Department 19 through a communication 
line 25 by control of the communications control section 24. At the filing Management Department 19, 
an image file is divided into MAC and image data (header information other than the image data itself, 
such as JPEG and TIFF, may be included in this image data), MAC is inputted into the decryption 
section 21, and image data is inputted into MD creation section 22. 

[0018] In the decryption section 21, MD1 is generated by decrypting MAC using the public key Kpublic 
(camera) memorized beforehand in the public key memory 20. This public key Kpublic (camera) and the 
above mentioned private key Kprivate (camera) are keys which serve as a pair in encryption/decryption 
processing. On the other hand, in MD creation section 22, MD2 is generated using predetermined 
functions, such as a Hash Function, from the inputted image data. Next, in the comparison coincidence 
section 23, when MD1 is compared with MD2 and both are not in agreement, it can judge with the image 
file having been altered by the 3rd person. 

[0019] According to the above-mentioned 1st operation gestalt, the data (MAC) for alteration detection 
are created using the encryption key in a camera from image data, and it can check whether image data 
is altered by writing in this data for alteration detection in an image file, for example, the header 
information of an image. The weight of the evidence of the digital image it was presupposed that it was 
inferior of a digital image by this compared with the image conventionally photoed using the film can be 
heightened. 

[0020] Moreover, by this operation gestalt, although the encryption key for creating the data for 
alteration detection is not revealed outside by any means including a camera user, since the encryption 
key for creating the data for alteration detection is beforehand stored in the memory area in a camera, 
it can manage an encryption key on very [ in hard ] high security level. 

[0021] Next, the digital camera of evidence which has various kinds of modes (multimode) as the 2nd 
operation gestalt of this invention is explained. Here, the function of the request according to the 
purpose of using a camera can be set up by equipping a camera with the optional feature in the following 
various modes: Various modes are secure modes which encipher an image file here, the usual 
photography mode in which a security function is not used, the alteration supervision mode which gives 
alteration detection data to the photoed image file and the digital-watermarking mode which records the 
photoed copyright information on a photograph on an image file as digital watermarking, when saving an 
image file further at a dismountable storage, or when transmitting an image file using communication 
facility. 

[0022] Hereafter, with reference to drawing 3 , it explains to a detail further. What has the same 
reference number as drawing 1 in drawing 3 shall have the same function. In the digital camera 102 of 
evidence which consists of the camera section 50-2 in this operation gestalt, a user can choose [ from ] 
the desired mode among various kinds of modes described above in the mode selection section 31. 
[0023] For example, when normal mode is chosen, the image data which picturized the photographic 
subject with the image pick-up means 60, and was obtained is memorized in an image memory 6. 
Especially in this mode, security mode does not work, but format conversion is carried out in the file- 
format-conversion section 8, the image data read from the image memory 6 is sent to the filing 
Management Department 13, and file management is carried out. 

[0024] Moreover, when digital-watermarking mode is chosen, after image data is inputted into the 
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digital-watermarking creation section 30 from the fiie-format-conversion section 8 and digital- 
watermarking data are embedded at the image data concerned; it is again returned to the file-format- 
conversion section 8 t conversion of a format is performed in it, and file management is carried out to it 
at the filing Management Department 13. 

[0025] Moreover, when alteration prevention mode is chosen, after MAC is added to a header by the 
approach described above with reference to drawing 2 , file management is carried out at the filing 
Management Department 13. 

[0026] Moreover, when alteration detection mode is chosen, detection of the existence of the alteration 
to the image file which it was acquired from the external device through the storage 17 or the 
communication line 16 (PC, alteration test equipment, etc.), and was sent to the filing Management 
Department 13 is performed. That is, the image data to which MAC was added is divided into MAC and 
image data, image data is inputted into MD creation section 33 from the filing Management Department, 
and MAC is inputted into the decryption section 34. In MD creation section 33, MD is generated using 
predetermined functions, such as a Hash Function, from the inputted image data. Moreover, the 
decryption section 34 generates MD' using the public key Kpublic (camera) memorized by the public key 
memory 35. It judges whether the comparison coincidence section 32 compares MD and MD\ and is in 
agreement. When both are not in agreement, it turns out that image data was altered by the 3rd person. 
[0027] Moreover, secure mode is used when memorizing image data to a storage. In this case, image 
data is read from the filing Management Department 13, and it is inputted into the encryption section 36. 
The encryption section 36 enciphers this image data using the share key memorized by the share key 
memory 37, and sends the enciphered image data to the filing Management Department 13 again. Then, 
this enciphered image data demounts by control of the record-medium control section 15, and it is 
written in the possible storage 17. 

[0028] Moreover, secure mode is used also when transmitting an image file through a communication line. 
In this case, image data is read from the filing Management Department 13, and it is inputted into the 
encryption section 36. The encryption section 36 enciphers this image data using the share key 
memorized by the share key memory 37, and transmits the enciphered image data to external devices 
(PC, alteration test equipment, etc.) through a communication line 16 by control of the communications 
control section 14. 

[0029] According to the above-mentioned 2nd operation gestalt, copyright can be kept by taking a 
photograph by normal mode, when photographing a snap image, and taking a photograph in digital- 
watermarking mode to alteration supervision mode and the image which wants to keep copyright, for 
example, in photoing the thing used as an image of evidence. Furthermore, preservation and transmission 
of data can be carried out to insurance by choosing secure mode to photo the high image of 
confidentiality and transmit an image file to insurance. Moreover, it becomes possible by combining two 
or more modes to use one camera for various applications from the above-mentioned effectiveness. 
[0030] With reference to drawing 4 , the 3rd operation gestalt of this invention is explained below. In 
drawing 4 , the thing of the same reference figure as drawing 1 shall have the same function. Moreover, 
although the configuration in the communication facility of drawing 1 and the various modes of drawing 3 
is omitted here, of course, you may have these functions. In the digital camera 103 of evidence which 
has the camera section 50-3, the image data obtained by picturizing a photographic subject with the 
image pick-up means 60 is memorized in an image memory 6. Image data is read from an image memory 
6 to the file-format-conversion section 8, and it is changed into the graphics format of criteria, such as 
JPEG and TIFF. Thereby, the file format by which the data of header information were added to image 
data is created ((A) of drawing 5 ). 

[0031] The information for personal authentication is read from IC card 40 for personal authentication 
with which the camera section 50-3 was equipped by control, of the IC card control section 41 to 
coincidence, and it is inputted into the file-format-conversion section 8, and it is recorded as the 
information for personal authentication shows a header at (B) of drawing 5 . Next, in MD creation 
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section 9, MD is created by applying predetermined functions, such as a Hash Function, to the whole 
data or image data, and the data for personal authentication ((C) of drawing 5 ). Next, in the MAC 
creation section 11, MAC is created by enciphering MD using the private key Kprivate (camera) 
memorized beforehand in the private key memory 10 ((D) of drawing 5 ). In addition to the data and the 
data for personal authentication of image header information, at the header Records Department 12, 
MAC is stored in an image header. Thereby, in a graphics format as shown in (E) of drawing 5 , an image 
file is saved at the filing Management Department 13, and file management is carried out. 
[0032] Such an image file demounts by control of the storage control section 15, and in order to detect 
whether it was altered while being memorized and carried by the possible storage 17, alteration 
detection equipment 104 is used. 

[0033] That is, the image file memorized by the storage 17 with which alteration test equipment 104 was 
equipped is read to the filing Management Department 19 by control of the storage control section 18. 
At the filing Management Department 19, it separates into the whole data which need an image file to 
calculate MAC and the above mentioned MAC, i.e., the data except MAC, image data (header information 
other than the image data itself, such as JPEG and TIFF, may be included in this image data), and the 
data for personal authentication, MAC is inputted into the decryption section 21, and data required to 
calculate MAC are inputted into MD creation section 22. Furthermore, the data for personal 
authentication are inputted also into the individual humanity news read-out section 22. 
[0034] In the decryption section 21, MD1 is generated by decrypting MAC using the public key Kpublic 
(camera) memorized beforehand in the public key memory 20. On the other hand, in MD creation section 
22, MD2 is generated using predetermined functions, such as a Hash Function, from the inputted image 
data. Next, in the comparison coincidence section 23, when MD1 is compared with MD2 and both are not 
in agreement, it can judge with having been altered by the 3rd person. 

[0035] Moreover, in the individual humanity news read-out section 42, specification of a photography 
person is performed by reading the data for personal authentication. Here, specification of a 
photography person is meaningful only when it is checked that image data is not altered. 
[0036] According to the above-mentioned 3rd operation gestalt, not only the existence of an alteration 
of an image but an image photography person can specify by adding the information for personal 
authentication at the time of the data origination for alteration detection of image data. Especially, as 
information for a photography person's personal authentication, since the data for alteration detection 
are created from the data with which image data and the data for personal authentication were aligned 
using said encryption key, the alteration of image data and the alteration of a photography person's data 
for personal authentication are detectable with one alteration detection data here. If a photography 
person's data for personal authentication are not altered, a photography person can be specified from 
the data for personal authentication. 

[0037] The 4th operation gestalt of this invention is explained below. In drawing 6 , the thing of the same 
reference figure as drawing 1 shall have the same function. Moreover, although the configuration in the 
communication facility of drawing 1 and the various modes of drawing 3 is omitted here, of course, you 
may have these functions. In the digital of-evidence camera system 105 which has the camera section 
50-4, the image data obtained by picturizing a photographic subject with the image pick-up means 60 is 
memorized in an image memory 6. Image data is read from an image memory 6 to the file-format- 
conversion section 8, and it is changed into the graphics format of criteria, such as JPEG and TIFF. 
Thereby, the file format by which the data of header information were added to image data is created 
((A) of drawing 7 ). Next, in MD creation section 9, MD1 or MD2 (B [ of drawing 7 / (B) ], (B)') is 
generated using predetermined functions, such as a Hash Function, from the whole data or image data. 
These MD1 and MD2 may be the same. MD1 is inputted into the MAC creation section 11. In the MAC 
creation section 11, MAC is calculated using the private key Kprivate (camera) beforehand memorized 
by the private key memory 10, and MAC1 is created ((C) of drawing 7 ). This MAC1 is sent to the 
header Records Department 12. 
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[0038] On the other hand, MD2 is inputted into IC card 40' for personal authentication with which the 
camera section 50-4 was equipped through the IC card control section 41. In IC card40' for personal 
authentication, MD2 is enciphered using the private key Kprivate (IC card) memorized by internal private 
key memory, and MAC2 is created ((C)' of drawing 7 ). This MAC2 is sent to the header Records 
Department 12 through the IC card control section 41. 

[0039] In addition to the data of image header information, at the header Records Department 12, MAC1 
and MAC2 are stored in an image header. Thereby, in a graphics format as shown in (D) of drawing 7 , an 
image file is saved at the filing Management Department 13, and file management is carried out. 
[0040] Such an image file demounts by control of the storage control section 15, and in order to detect 
whether it was altered while being memorized and carried by the possible storage 1 7, alteration 
detection equipment 106 is used. 

[0041] That is, the image file memorized by the storage 17 with which alteration test equipment 106 was 
equipped is read to the filing Management Department 19 by control of the storage control section 18. 
[0042] At the filing Management Department 19, an image file is divided into MAC1, MAC2, and image 
data (header information other than the image data itself, such as JPEG and TIFF, may be included in 
this image data), MAC1 is inputted into the decryption section 21-1, and image data is inputted into MD 
creation section 22-1. In the decryption section 21-1, MD1 is generated by decrypting MAC1 using the 
public key Kpublic (camera) beforehand memorized by public key memory 20'. A public key Kpublic 
(camera) and a private key Kprivate (camera) are keys which serve as a pair in encryption/decryption 
processing. On the other hand, in MD creation section 22-1, MD1' is generated using predetermined 
functions, such as a Hash Function, from the inputted image data. Next, in the comparison coincidence 
section 23-1, when MD1 is compared with MD1' and both are not in agreement, it can judge with being 
altered by the 3rd person. 

[0043] Similarly, MAC2 is inputted into the decryption section 21-2, and image data is inputted into MD 
creation section 22-2. In the decryption section 21-2, MD2 is generated by decrypting MAC2 using the 
public key Kpublic (IC card) beforehand memorized by public key memory 20'. A public key Kpublic (IC 
card) and a private key Kprivate (IC card) are keys which serve as a pair in encryption/decryption 
processing. 

[0044] On the other hand, in MD creation section 22-2, MD2' is generated using predetermined 
functions, such as a Hash Function, from the inputted image data. Next, in the comparison coincidence 
section 23-2, when MD2 is compared with MD2' and both are in agreement, a photography person can 
be specified. 

[0045] According to the above-mentioned 4th operation gestalt, not only the existence of an alteration 
of an image but an image photography person can specify by adding the information for personal 
authentication at the time of the data origination for alteration detection of image data. It is possible to 
apply especially, the electronic signature used with other information systems, such as an electronic 
mail and electronic commerce, as 2nd data for alteration detection, since the 2nd data for alteration 
detection created with the equipment of the camera exterior as information for a photography person's 
personal authentication here is used. Therefore, an infrastructure^ an electronic authentication office, 
electronic commerce, etc. ] information system and the digital of-evidence camera system which was 
able to take cooperation can also be built. 

[0046] Below, the 5th operation gestalt of this invention is explained. The 5th operation gestalt is related 
with the digital image edit system using the image server constituted from hardware, such as a board 
and a PCMCIA card. Here, in order to simplify explanation, the minimum configuration of an image server 
is assumed. 

[0047] Conventionally, by the approach using the data for alteration detection used to document data, it 
was considered that it was altered when original data were changed, even when it was only small. 
However, about image data, processing of compression, a clipping, insertion of a caption, etc., etc. is 
needed on the property of data in many cases. If it is the case of the photograph using a film, only a 
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required part can be burned on printing paper, or it is equivalent to describing a comment on the reverse 
side of a photograph. If there is a legal excuse, such processing will not be in charge of an alteration. 
Th ere j s the approach of what kind of processing was performed to original image data and recording the 
processing hysteresis as an approach forjudging whether just processing was made. 
[0048] With this operation gestalt, it detects whether it is altered with the hysteresis of the performed 
processing except the image server by using an image server in the image which processed the clipping 
of a field of compression of a part of image data, the addition of a caption, etc. 

[0049] Drawing 8 consists of a personal computer 107-1 and an image server 107-2 which consists of a 
PCMCIA card with which this personal computer 107-1 can be equipped, as it is drawing showing the 
configuration of the image server system 107 of the 5th operation gestalt, for example, is shown in 
drawing 1 1 . 

[0050] An operation of the 5th operation gestalt is explained with reference to the flow chart of drawing 
9 below. First, the filing Management Department 72 acquires the image file of a format as shown in (A) 
of drawing 9 from a storage 70 by control of the storage control section 71. Or the image file concerned 
is acquired from an external device 93 by control of the communications control section 78 through a 
communication line 77 (step S1). In this case, an image file can be easily inputted from an external 
device by preparing the filing Management Department 72 connection terminals, such as a serial cable in 
which direct continuation is possible, and SCSI, IrDA. Moreover, the same effectiveness is acquired even 
when it has the terminal of network connections, such as Ethernet. Next, the MAC verification section 
73 receives an image file from the filing Management Department 72, and verifies MAC1 (step S2). That 
is, the filing Management Department 72 divides an image file into MAC1 and image data, MAC1 is 
inputted into the decryption section 75, and image data is inputted into MD creation section 76. The 
decryption section 75 is decrypted using the public key Kpublic (caViera) memorized by the public key 
memory 74, and creates MD1. Moreover, MD creation section 76 creates MDV using predetermined 
functions, such as a Hash Function. By comparing MD1 with MD1\ the comparison coincidence section 
79 sends the verification result about, whether the image photoed with the camera is altered after that 
to the filing Management Department 72. 

[0051] When not altered, an image file is inputted into the image editorial department 93 from the filing 
Management Department 72, and image edit by the user using the image edit tool 80 is performed (step 
S3). In this case, the contents of the image file are displayed on an image display device 82, looking at 
this screen, using data entry units (a keyboard, mouse, etc.) 84, various kinds of processings are 
required or a user 91 inputs data. 83 is the user interface of a user 91 and the image server 107. The 
hysteresis at the time of edit is recorded on the edit hysteresis Records Department 81. The edit 
hysteresis Records Department 81 reads the information for personal authentication from IC card 92 for 
personal authentication to coincidence by control of the IC card control section 85, and records on it 
into edit hysteresis. The above-mentioned edit is continued until directions of an edit halt are issued by 
the user and decision of step S5 serves as NO. 

[0052] Since the image file after edit and the data of edit hysteresis are sent to the filing Management 
Department 72, the filing Management Department 72 records on an image header in a format as shows 
the information on edit hysteresis to (B) of drawing 9 (step S6). In leaving the information which 
specifies the photoed camera, it also records camera information on an image header in a format as 
shown in (C) of drawing 9 . 

[0053] Next, the image file after edit and the data of edit hysteresis are inputted into MD creation 
section 87 of the renewal section 86 of an image file from the filing Management Department 72, and 
MD2 is created using predetermined functions, such as a Hash Function. Next, the MAC creation 
section 88 creates MAC2 by enciphering MD2 using the private key Kprivate of the image server 107 
memorized beforehand (image server) in the private key memory 90 (step S7). At the header Records 
Department 89, it records on an image header in a format as shows this MAC2 by (D) of drawing 9 (step 
S8). In leaving the information which specifies a camera, it becomes a format as shown in (E) of drawing 
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9 . The image file to which MAC2 was added is sent to the filing Management Department 72, and after 
this, it demounts by control of the storage control section 71, and is saved at the possible storage 70, or 
this image file is sent to an external device 93 through a communication line 77 by control of the 
communications control section 78, and is saved. 

[0054] Since it can check whether what kind of processing was performed from the original image file, or 
the contents of an image have been changed except an image server by using an image server according 
to the above-mentioned 5th operation gestalt, it is not altered even if it performs required processing on 
the property of a data compression or image data like field logging. Moreover, when creating the data for 
alteration detection added to an image file after edit by the image server, the user who edited the image 
can be specified by using the data for personal authentication. 

[0055] Below, the 6th operation gestalt of this invention is explained. The 6th operation gestalt 
constitutes the image server in the 5th operation gestalt from software started on PC etc. Here, in 
order to simplify explanation, the minimum configuration of an image server is assumed. 
[0056] Drawing 10 is drawing showing the configuration of the image server system 108 constituted by 
installing an image server in PC. Here, only a different point from the configuration of the 5th operation 
gestalt shown in drawing 8 is explained. 

[0057] As the 6th operation gestalt shows to drawing 10 , it is [ the MAC creation section 88 and ] a 
private key Kprivate. The memorized private key memory 90 is formed in the interior of IC card 109 
which can be detached and attached freely to the not the interior but image server 108 of the image 
server system 108. Moreover, the IC card control section 85 is formed in the interior of renewal section 
of image file 86' of the image server system 108. 

[0058] The image file after edit and the data of edit hysteresis are inputted into MD creation section 87 
of renewal section of image file 86', and MD2 is created using predetermined functions, such as a Hash 
Function. This MD2 is sent to the MAC creation section 88 of IC card 109 by control of the IC card 
control section 85. The MAC creation section 88 enciphers MD2 using a private key Kprivate (IC card), 
and creates MAC2. This MAC2 is recorded on an image header in a format as sent to the header 
Records Department 89 by control of the IC card control section 85 and shown in (D) of drawing 9 , or 
(E). In addition, the information for personal authentication is stored in IC card 109 like the 5th operation 
gestalt, and this is read and you may make it record into edit hysteresis. 

[0059] Since according to the above-mentioned 6th operation gestalt in addition to the effectiveness of 
the 5th operation gestalt it constitutes from a storage in which attachment and detachment like an IC 
card of management of an encryption key and processing of encryption are free and other functions, 
such as edit of an image and creation of edit historical data, were constituted from software, it has the 
effectiveness that an image server can be built by low cost. 

[0060] The 7th operation gestalt of this invention is explained below. The 7th operation gestalt consists 
of a public key server style and a public key acquisition / registration device of alteration test 
equipment and an image server about decryption key acquisition / registration system. For the private 
key as encryption and the public key as a decryption key which are used with this operation gestalt, as 
shown in drawing 13 (A), it is generated by the manufacturer according to the key generation device 120 
at the time of manufacture of equipments, such as a digital camera 220, and the image server 221, IC 
card 222, among these a private key is built-in to equipment, It is registered. This private key is 
immediately eliminated by insurance and the positive approach after registration. 

[0061] Moreover, a public key is memorized by the record medium 203 by the key registration section 
202 of the public key server style 110 which equipment is made to correspond with the serial number as 
an identifier of a proper, and is shown in drawing 13 (B). 

[0062] When performing alteration detection to alteration detection equipment and the image by which 
public key acquisition / registration device 111 of an image server was photoed with the digital camera 
220, the serial number of equipment is transmitted to the key retrieval section 204 through the 
communications control section 211, communication lines 210 and 209, and the communications control 
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section 208 from the public key acquisition section 212. The key retrieval section 204 reads the public 
key corresponding to the serial number of equipment from a storage 203, and sends it to MD creation 
section 205. MD creation section 205 creates MD using predetermined functions, such as a Hash 
Function, and sends it to the MAC creation section 206. The MAC creation section 206 creates MAC 
using the private key beforehand memorized by the private key memory 207, and sends it to the public 
key acquisition section 212 through the communications control section 208, a communication line 209, 
a communication line 210, and the communications control section 211 with a public key. The public key 
acquisition section 212 sends the acquired public key and the serial number of equipment to the public 
key registration section 214. The public key registration section 214 registers a public key and the serial 
number of equipment concerned into the public key memory 213. 

[0063] The data of a public key are sent to MD creation section 216 from the public key acquisition 
section 212, and MAC is sent to coincidence at the decryption section 217. MD creation section 216 
creates MD from the data of this public key using predetermined functions, such as a Hash Function. 
The decryption section 217 creates MD' by decrypting MAC using the public key Kpublic of the key 
management server memorized by the public key memory 218 (key management server). The 
comparison coincidence section 215 detects an alteration by whether MD and MD' is compared and it is 
in agreement- It is the purpose that by which the camera obtained by means of communications and the 
public key of an image server were acquired from the just key management server, and that verification 
of MAC here checks whether it is further altered in the middle of the communication link. 
[0064] In addition, you may make it send the public key registered into the public key server 1 10 to a 
user with safe means, such as mailing. According to the above-mentioned 7th operation gestalt, the 
decryption key of the data for alteration detection is acquirable by sending the serial number of 
equipment to a decryption key (public key) server. When it follows, for example, a decryption key server 
can be used from the Internet, the data for alteration detection can be acquired even from where among 
the world based on the serial number of a camera. 

[0065] The 8th operation gestalt of this invention is explained below. The 8th operation gestalt is related 
with alteration prevention of a multiplex resolution image. When a document file changes a part, a text 
stops connecting, semantics will change and the contents will differ from the original file. Since 
redundancy of image data is high, even if it performs edit of some, such as modification of resolution, to 
it, a photographic subject can be recognized in many cases. Therefore, since being the magnitude 
beyond the need and wanting to drop resolution on the image size at the time of photography and an 
unnecessary part are reflected, in some cases, I want to start only a required part in the side using an 
image. However, the image server for alteration prevention must usually be prepared, an image must be 
edited in the interior, and MAC must be added again. 

[0066] So, in the 8th operation gestalt, in order to solve the above-mentioned problem, the image of an 
alteration prevention camera is saved in the format holding a multiplex resolution image. Drawing 1414 is 
drawing showing the configuration of the 8th operation gestalt of this invention. In the digital of- 
evidence camera section 1 12, the image data obtained by picturizing a photographic subject with the 
image pick-up means 60 is memorized in an image memory 6. Next, this image data is inputted into the 
image contraction section 300, and is changed into the image of two or more kinds of resolution. If the 
minimum resolution to which a user wants to guarantee an alteration through the MAC creation 
resolution directions section 302 is specified at this time, this will be sent to MD creation section 9 
through the filing Management Department 13. In MD creation section 9, MD is created using 
predetermined functions, such as a Hash Function. 

[0067] On the other hand, the private key created from the data of the camera proper memorized by the 
data memory 301 of a camera proper and the information for personal authentication read from IC card 
40 for personal authentication by control of the IC card control section 41 is memorized by the private 
key memory 10. In the MAC creation section 11, MD created in MD creation section 9 using this private 
key is enciphered, MAC is created, and it sends to the filing Management Department 13. The filing 
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Management Department 13 gathers the image data of two or more kinds of resolution in one file, adds 
MAC created from the data of resolution with which the above was specified further to the image data 
concerned, and saves by control of the storage control section 1 5 at a storage 1 7. 
[0068] Drawing 16 is drawing for explaining the image data file of this operation gestalt. As shown in 
drawing 16 , the conversion to a low resolution from high resolution is specified beforehand. MAC is 
created from the data of the resolution which guarantees the alteration prevention directed in the MAC 
creation resolution directions section 302, and it records on the header or another MAC management 
file of image data. 

[0069] On the other hand, in alteration test equipment 113, MAC and image data are read from a 
storage 17 by control of the storage control section 18, and it sends to the filing Management 
Department 19. At the filing Management Department 9, MAC is sent to the decryption section 21 and 
image data is sent to an image memory 303. In the decryption section 21, MD1 is created by decrypting 
MAC using a public key. Moreover, after the image data memorized in the image memory 303 is reduced 
by the contraction approach predetermined in the image contraction section 304, it is sent to MD 
creation section 22, and MD2 is created using predetermined functions, such as a Hash Function. In the 
coincidence comparator 23, it judges whether image data was altered by comparing MD1 with MD2. 
[0070] With reference to drawing 15 t the 9th operation gestalt of this invention is explained below. The 
9th operation gestalt holds the image of multiplex resolution, and the image of each resolution has the 
intention of preventing the alteration of the graphics format in which the small block of fixed size is 
stored as a unit. The reason for storing the small block as a unit in this graphics format is because some 
images can be referred to at a high speed. 

[0071] Although the operation of the digital camera 1 14 of evidence is the same as an operation of the 
above-mentioned digital camera 112 of evidence, while having image contraction / division section 305 
and creating the image of two or more resolution here, as shown in drawing 1 7 , with this operation 
gestalt, an image is divided per block of fixed magnitude. At the filing Management Department 1 3, MAC 
is created for every smallness block and MAC is written in the header for every small block. The image 
file with MAC is memorized by the storage 1 7 as an original image by control of the record-medium 
control section 15. 

[0072] The user whose whole photographic coverage and resolution of an image are unnecessary 
creates logging of a required part and the image of required resolution from the original image read from 
the storage 17 within common PC1 15 using the edit software 306 at the time of photography. A user 
inputs into the image editorial department 306 by making the location of a required image part, size, 
resolution, etc. into the edit parameter 307. At the filing Management Department 13, the corresponding 
image block of a location is extracted from the corresponding image of resolution, and it saves at 
another image file. 

[0073] When inspecting an alteration with alteration detection equipment 116, an edited image is read 
from a storage 17 to the filing Management Department 19 by control of the storage control section 18. 
In the alteration detection section 308, alteration detection is performed to an edited image. If MAC 
added for every small block from the first is added to a file new as it is at this time, even if it will not 
prepare an alteration prevention image server, a user can perform an editing task called modification of 
field logging of an image or resolution, giving proof nature to an image. Moreover, if it adds the data 
which recorded the procedure of filtering, without changing the pixel value itself in performing filtering, 
such as contrast stretching and smoothing, the guarantee of an original image will be attained also about 
a filtering image. 

[0074] In addition, invention of the following configurations is included in the above-mentioned concrete 
operation gestalt. 

1. Image Pick-up Section for being Digital of-Evidence Camera System Which Detects Alteration of 
Image Data Which Picturized Photographic Subject with Camera and was Obtained, and Picturizing 
Photographic Subject, The cipher-processing section which creates the data for alteration detection 
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from the image data obtained by the image pick-up using the encryption key built in beforehand, the 
camera to provide and the alteration detection section which detects whether said data for alteration 
detection were decrypted using the decryption key corresponding to said encryption key, and said image 
data was altered based on the result of this decryption — since — the digital of-evidence camera 
system characterized by becoming. 

(The operation effectiveness) According to this invention, it can check whether image data is altered by 
creating the data for alteration detection using the encryption key in a camera from image data, and 
decrypting this data for alteration detection using the decryption key corresponding to said encryption 
key. The weight of the evidence of the digital image it was presupposed that it was inferior of a digital 
image by this compared with the image conventionally photoed using the film can be heightened. 
[0075] Moreover, by this invention, although the encryption key for creating the data for alteration 
detection is not revealed outside by any means including a camera user, since the encryption key for 
creating the data for alteration detection is beforehand stored in the camera, it can manage an 
encryption key on very [ in hard ] high security level. 

2. Said cipher-processing section is the digital of-evidence camera system of the configuration 1 
publication characterized by creating said data for alteration detection by enciphering the data obtained 
by said image data with the application of the predetermined function using said encryption key. 

(The operation effectiveness) At least, for change, extent of the alteration to image data is a 
predetermined function (for example, Hash Function) so that it may appear greatly. Since the data for 
alteration detection were created by enciphering to the data applied and obtained, the data for alteration 
detection which can ensure alteration detection can be offered. 

3. Said alteration detection section is the digital of-evidence camera system of the configuration 2 
publication characterized by detecting whether said image data was altered by comparing the data 
obtained by said image data with the application of said predetermined function with the data which 
decrypted said data for alteration detection using said decode key, and were obtained. 

(The operation effectiveness) Since said data for alteration detection are used, alteration detection can 
be ensured. 

4. Said cipher-processing section is the digital of-evidence camera system of the configuration 1 
publication characterized by creating said data for alteration detection based on said encryption key and 
the data for personal authentication. 

(The operation effectiveness) Not only the existence of an alteration of an image but an image 
photography person can specify by adding the information for personal authentication at the time of the 
data origination for alteration detection of image data. 

5. Said cipher-processing section is the digital of-evidence camera system of the configuration 4 
publication characterized by creating the 1st data for alteration detection using said encryption key, 
creating the 2nd data for alteration detection using said data for personal authentication, setting said 
1 st and 2nd data for alteration detection from said image data, and considering as said data for 
alteration detection from said image data. 

(The operation effectiveness) Since it uses as data for alteration detection in accordance with the 1st 
data for alteration detection created from image data, and the 2nd data for alteration detection created 
from a photography person's data for personal authentication It is possible to apply said 2nd data for 
alteration detection like the electronic signature used with other information systems, such as an 
electronic mail and electronic commerce. An infrastructure^ an electronic authentication office, 
electronic commerce, etc. ] information system and the digital of-evidence camera system which was 
able to take cooperation can also be built. 

6. Digital of-evidence camera system of configuration 4 publication characterized by having had the 
storage section which memorizes said data for personal authentication, and said encryption key, and the 
2nd cipher-processing section which creates the 2nd data for alteration detection from said data for 
personal authentication, and constituting said this 2nd cipher-processing section free [ attachment and 
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detachment ] to said camera. 

( the operation effectiveness ) they be the media ( IC card etc. ) which can be detach and attach freely 
to a camera about the 2nd cipher processing section which memorize the data for personal 
authentication , and an encryption key , and create the 2nd data for alteration detection . by having 
prepare , even when carrying this medium and the camera of others who do not use usually be use , the 
existence of an alteration of the image which the individual attested and photoed certainly can be 
check . 

7. Said cipher-processing section is the digital of-evidence camera system of the configuration 4 
publication characterized by creating said data for alteration detection using said encryption key from 
the data with which said image data and said data for personal authentication were aligned. 

(The operation effectiveness) In the case of the approach of creating the data for alteration detection 
using said encryption key, as information for a photography person's personal authentication, the 
alteration of image data and the alteration of a photography person's data for personal authentication 
are detectable with one alteration detection data from the data with which image data and the data for 
personal authentication were aligned. If a photography person's data for personal authentication are not 
altered, a photography person can be specified from the data for personal authentication. 

8. Image Pick-up Section for being Digital of-Evidence Camera System Which Detects Alteration of 
Image Data Which Picturized Photographic Subject with Camera and was Obtained, and Picturizing 
Photographic Subject, The cipher-processing section which creates the data for alteration detection 
from the image data obtained by the image pick-up using the encryption key built in beforehand, The 
camera to provide and the alteration detection section which detects whether said data for alteration 
detection were decrypted using the decryption key corresponding to said encryption key, and said image 
data was altered based on the result of this decryption, since — the alteration supervision mode as 
which, as for said camera, said image data detects whether it was altered or not — in addition, with the 
secure mode in which encryption to the image data transmitted to said alteration detection section from 
said camera is performed It has the digital-watermarking mode which embeds digital-watermarking data 
at image data, and the normal mode which performs the usual photography without using a security 
function. The digital ©^evidence camera system characterized by having the mode selection section for 
choosing the mode of at least one request from these modes. 

(The operation effectiveness) By equipping a camera with the optional feature in various modes, the 
function of the request according to the purpose of using a camera can be set up. For example, when 
photographing a snap image, taking a photograph by normal mode and photoing the thing used as an 
image of evidence, copyright can be kept by taking a photograph in digital-watermarking mode to 
alteration supervision mode and the image which wants to keep copyright. Furthermore, preservation 
and transmission of data can be carried out to insurance by choosing secure mode to photo the high 
image of confidentiality and transmit an image file to insurance. Moreover, it becomes possible by 
combining two or more modes to use one camera for various applications from the above-mentioned 
effectiveness. 

9. Decryption Key Storage Section Memorized in accordance with 1st Decryption Key corresponding to 
1 st Encryption Key Generated by Equipment corresponding to Identifier of Proper, and this Identifier, 
The decryption key output section which creates the data for alteration detection about said 1 st 
decryption key using the 2nd encryption key, and is outputted in accordance with this data for alteration 
detection, and said 1 st decryption key, A preparation ********** server and the decryption key storage 
section which memorizes said 1st decryption key acquired from said decryption key server through 
means of communications etc., Said data for alteration detection supplied from said decryption key 
server through means of communications etc. are decrypted using the 2nd decryption key corresponding 
to said 2nd encryption key. the decryption key acquisition section equipped with the alteration detection 
section which detects whether said 1st decryption key was altered based on the result of this 
decryption — since — decryption key acquisition - characterized by becoming Registration system. 
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(The operation effectiveness) According to this invention, the decryption key of the data for alteration 
detection is acquirable by sending the serial number of equipment to a decryption key server. When it 
follows, for example, a decryption key server can be used from the Internet, the data for alteration 
detection can be acquired even from where among the world based on the serial number of a camera. 

10. With Filing Management Department Which is Digital Image Edit System into which Image Data is 
Edited, and Does Filing Management of the Image Data Inputted through Image Input Section while 
Detecting Alteration of Image Data While decrypting the 1st data for alteration detection beforehand 
given to said image data using the decryption key corresponding to the encryption key used when 
creating this data for alteration detection The alteration detection section which detects the alteration 
condition of image data by comparing this the 1 st decoded data for alteration detection and said image 
data, To said image data from the edited image data to which various image processings were performed 
by the image editorial department which performs various kinds of image processings, and said image 
editorial department, and the data of the edit hysteresis by said image editorial department the renewal 
section of an image file which creates the 2nd data for alteration detection using an encryption key 
other than said encryption key, and adds this to said edited image data — since — the digital image edit 
system characterized by becoming. 

(The operation effectiveness) According to this invention, since the data for alteration detection are 
created in accordance with image data and edit hysteresis, it can check what kind of edit processing has 
been performed to the original image, and can detect further whether image edit processing is performed 
except the system concerned. 

11. Said renewal section of an image file is the digital image edit system of the configuration 10 
publication characterized by using said another encryption key for said personal authentication 
information, and creating said 2nd data for alteration detection while being able to detach and attach 
freely to a digital image edit system and memorizing said personal authentication information and said 
another encryption key. 

(The operation effectiveness) An image server can be built by low cost with constituting other functions, 
such as edit of an image and creation of edit historical data, from a storage in which attachment and 
detachment like an IC card of management of an encryption key and processing of encryption are free 
by software. 

12. The digital image edit system of the configuration 9 publication characterized by uniting and 
recording personal authentication information on said edit hysteresis. 

(The operation effectiveness) The person who edited the image can be specified by including the 
information for personal authentication in image data also including the data of image edit hysteresis. 

13. Said image input section is the digital image edit system of the configuration 9 publication 
characterized by inputting the image data memorized by external storage by connecting with said image 
filing section through direct continuation (a cable, IrDA) or a communication line. 

(The operation effectiveness) An image file can be easily inputted from an external device by equipping 
the image filing section of an image server with the terminal of direct continuation, such as a serial cable,^ 
and SCSI, IrDA, and the terminal of network connections, such as Ethernet. 

14. It is a digital of-evidence camera system the configuration 1 characterized by for said image data be 
multiplex resolution image data which made the group two or more image data different mutually 

[ resolution ] , and memorized it , and said cipher-processing section have the selection section which 
chooses at least one image data which has desired resolution out of said multiplex resolution image data 
in order to create said data for alteration detection , or given in ten . 

(The operation effectiveness) By specifying the resolution which guarantees alteration detection at the 
time of record, the user using an image becomes possible [ using a desired resolution image without 
being dependent on the resolution at the time of photography ]. 

15. it be a digital of evidence camera system the configuration 1 which said image data be a multiplex 
resolution image data which made the group two or more image data different mutually [ resolution ] , 
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and memorized them , and each image data in said multiplex resolution image data be memorize 

considering the predetermined small block as a unit , and said cipher processing section be said small 

block unit , and be characterize by create said data for alteration detection , or given in ten . 

(The operation effectiveness) Alteration detection can be carried out also to the image which performed 

image edit like a clipping, without preparing the server of dedication by adding alteration detection data 

for every small block. 

[0076] 

[Effect of the Invention] According to this invention, the weight of the evidence of a digital image can be 
heightened, the digital of-evidence camera system and decryption key acquisition / registration system 
which can manage an encryption key on very high security level can be offered, and even if it edits 
further compression which is needed on the property of an image, field logging, insertion of a caption, 
etc., the digital image edit system which can maintain the weight of the evidence of a digital image can 
be offered. 



[Translation done.] 



* NOTICES * 

JPO and NCIPI are not responsible for any 
damages caused by the use of this translation. 

1 This document has been translated by computer. So the translation may not reflect the original 
precisely. 

2.**** shows the word which can not be translated. 
3.1n the drawings, any words are not translated. 



DESCRIPTION OF DRAWINGS 



[Brief Description of the Drawings] 

[Drawing 1] It is drawing showing the digital of-evidence camera structure of a system concerning the 
1 st operation gestalt of this invention. 

[Drawing 2] It is drawing showing a procedure until MAC is added to image data. 

[Drawing 3] It is drawing showing the configuration of the digital camera of evidence concerning the 2nd 
operation gestalt of this invention. 

[Drawing 4] It is drawing showing the digital of-evidence camera structure of a system concerning the 
3rd operation gestalt of this invention. 

[Drawing 5] It is drawing showing a procedure until the data for personal authentication and MAC are 
added to image data. 

[Drawing 6] It is drawing showing the digital of-evidence camera structure of a system concerning the 
4th operation gestalt of this invention. 

[Drawing 7] It is drawing showing a procedure until MAC1 and MAC2 are added to image data. 
[Drawing 8] It is drawing showing the image server structure of a system concerning the 5th operation 
gestalt of this invention. 

[Drawing 9] It is a flow chart for explaining an operation of the 5th operation gestalt. 

[Drawing 10] It is drawing showing the image server structure of a system concerning the 6th operation 

gestalt of this invention. 

[Drawing 1 1] It is drawing showing the example of the image server structure of a system of the 5th 
operation gestalt. 
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[Drawing 12] It is drawing showing the example of the image server structure of a system of the 6th 
operation gestait. 

[Drawing 13] It is drawing showing decryption key acquisition / registration structure of a system 
concerning the 7th operation gestait of this invention. 

[Drawing 14] It is drawing showing the digital of-evidence camera structure of a system concerning the 
8th operation gestait of this invention. 

[Drawing 15] It is drawing showing the digital of-evidence camera structure of a system concerning the 
9th operation gestait of this invention. 

[Drawing 16] It is drawing for explaining the image data file concerning the 8th operation gestait. 
[Drawing 1 7] It is drawing for explaining the image data file concerning the 9th operation gestait. 
[Description of Notations] 

1 — Image pick-up lens, 

2 — Image sensor, 

3 — Amplifier, 

4 — A/D-conversion section, 

5 — Signal-processing section, 

6 — Image memory 

7 — Image display section, 

8 — File-format-conversion section, 

9 — MD creation section, 

10 — Private key memory, 

1 1 — MAC creation section, 

12 — Header Records Department, 

13 — Filing Management Department, 

14 — Communications control section, 

1 5 — Storage control section, 

16 — Communication line, 

17 — Storage, 

18 — Storage control section, 

19 — Filing Management Department, 

20 — Public key memory, 

21 — Decryption section, 

22 — MD creation section, 

23 - — Comparison coincidence section, 

24 — Communications control section, 

25 — Communication line, 
50-1 — Camera section, 
60 — Image pick-up means, 

100 — Digital camera of evidence, 

101 — Alteration test equipment. 



[Translation done.] 
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oT*^<iE*T££. S6fc««l*3*©llII-«*S: 

^acfTAst^5S3f*^e>tis. b^u jjoi • s 

d»©^iSTx^^;i/x-^©Bk«steJt-r<5«ffi*fliA 
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mz&tbziziz-jjfa&mmm^znzfr, z.<d-h 

fatf«©14Jtt;:J;9, W\z'£mMfr*>W®mz*®2> 

nz&mtf&z-js, tefflM\mxhm?LZ&?\z-& 
[0004] gjcffi^a©*s(j, £-ftt%.<D 

7?5>)\<?-$frib>\vi'3-f&W.t&£*®.iX, 
-y-y-f-/i7,h (Message Digest, .WT, MD) 

e>MD^atLi-r?>*&«^^$tiTt50, *u^x^x 
x >= ^ jpx- £ l t t) -5 1 fit a** £ < ^bf & 

[0 0 0 5] #{Cffl|ii£ttfcMD£^®i$£ffl^TH|Ht 
fbL, Ctl^r/ yir—vigflT- (Message Authent icat io 
n Code, £TF, MAC) £LT. *U V-T^f— 5> iz 

£h\z^m\zmmti>. z\zx\ m^mtntn^ 
fflMit%;mm\zmmzm2nT^z>>b<D t-rz {%.m% 
t)W?^(Dm$:^iz^nT^ft\f& < , m 3 

■oXhfrtifrtS.^) „ 

[0006] gfifiijte. ^u^x^x-^&m^nx 

^tt^Z\t$:ffl^Z>tzlb\Z, ST. tUi'tff-?* 

®£ffll^TMAC£«^§-fbLTMD£j£i£, d©MDi 
MD' t*i-S5;-r-5^t"5^^P^^o t>U ^tUv^ 

AC&ft&Xg-f, MDiMD ' 

Z\n\Z£-z>T, ^u^x;i^-^is3#{;:j;ot&« 

[0 0 0 7] 

{tut VT<Dm&mtemm&?z> z. tfr& ^ $ 

<DmM1fetl$:lSitb%Z\ttfT"%fe fritz. 
[0 0 0 8] i@^©»^t«5 :: -^©ttK±, =r 
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fritz, 

[0009] *5tw\tz.<D£otei&m\zmgisTt±2n 

tzh<DXh<0. ^(DB&JtT&tZZlt. xv^JUSHi 

t+a'jf-f is^jixwrn-fz c <h^*-e^-5x^^;niE 

»^5y7fA, ffi^fbgUBtf*- llyXfA^at 

■ Tis?)iwm(DUMffet>£&x%?i>5>)mmmM>'7> 

[0 0 10] 

mm&m&Tz>tztb<D^m) ±m<DgM&mf$.?z>tz 
zntzm&^—?<Dik'g 1 %:Wi%\-Tz>7"i;5')i<mMfi * v 

tlfclWb8l£ffl ^T^«^»fflx-^ *«f-^ 
[0 0 11] Sfc. 2§2tf)3gBJ§tt, 

d, mis.t)*7\z. mmmm'f-^fr^k^ntzfr^fr 
^T?a*«DitS5*ff ft: ^ y --7;^- h* t 

[0 0 12] Sfc. i3ffl^^(l a^bisiiff •■!» 
K*H6LT£jSan£jB 1 ©«F#Yt»H>*J6-r*» 1 O 

% i o«^b«KH-r sacMttaffl^-^ 2 wnt ^ 

a^fls»E*fflt. HilfB^ 2 OBS^fb«K:»i6r*IB2 

(D'&mmzm^x. mm^&m^vxmmmmtm 
50 u— a* fr bmmz ntz mz&m&'ftm zzmmt 
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[ooi3] ^fc. w.Ao&mt. a$?x-^©&®£ 
ntzmm?"- ? £ y y < u > ifmmt % ? r -f u > ^iff 

-r-sttfctr, £©«^£ftfc!gi©&g&2ni8x-^ 

t MEMIt- * t * it *W 5 C i K <fc 0 - ^ © 

mm t &m<Dt6mtm&m i^tss 2 ©&£&&!;& x- 
*&ffr*u cftSfl&BaftW^pfcx-^Kttinrt-* 

[0014] 20 

[»«©*»©#*] but. mw*mmvT*%w<Dm 

0 . x ^rJNUEfc* ^7100 1 0 1 £ 

50-iii aa?u>xit. mmmT2t, m<m$s3 
m*nmm^2\z£<offife2nz>. zwrnrnz^vm* 

noBtfM^EU 6 trseteSftT^&a^x 

[0 0 15] Bilfe^D 6 tf21S$nT^SH»x-^ 
B??^^*-?*; ht»»8l:*l>T, JPEG, 
T I FFte£(Dmm<DW&y*--?'y HtJEftSns. 
£ ft fC «t D , mfcx- 9\Z*\y yififflf- * **ff im £ 
ft&7r-fJU7*-"7y h**ffr£Sft<5 (H2© 

(A) ) „ &£MDffr*«9Ttt. ■•■r-^*4^J4 "0 

(B2CD (B) ) . MACflSfiSgfll ITU. 

H/tU 1 0 i;«)IBltSftfc»**lKp r ivate 

Sr^TMD^B^f'ffc-f'SitCcfcDMAC 

sfpdE-r* (02© (o ) . ^-v^fss^i 1 

Ttt, ffsjSLfcMACSHfc^y^KI&ilfrr* (0 2 
©(D)). 77'f'J>i'fI»13THi:oJ:3l:l/ 
TfP*Sft3t7 7'f h©a«7 7'f 
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[0 0 16] HO«t5ttH*7r^;l'**Etttii#iWWa8 
1 5 0ffl«fc«k0»*LBjffifce*8#l 7iCf2«£ft 
TJS^iltfftSHIK:, &&t>i£i£miMf9ffil 4©iWWfc 
J:t)afil0«l 6 £;frLTit«$ft5&*T'&«£ftfc 
*»5*»*«»-T*fc«>K:. &S&»8Bl 0 ltfJHUS 

[0017] rfcfes. &s&sg« i o i tcg*$n 
fcffitt^#i 7 izmm.ztiT^z>wmy r Mt, ten 

«M*ft!flffl 1 8 ©f&JWrJ; D 7 r -f U >^S=3gl$ 19C 
BK*til3ft*. SRI«7 7'f;Hia<IIB» 

gE2 4©$WCcfc9ii«[Ilgi2 5^LT77-f U 

9^i3S6ft*. 7?-f U >^^SoC 1 9 T 
«. i«77^MiMACt!iT-^ (£©B«x— 
iSfi&x— :?■?-©*>© ©fete: . JPEG^TIF 
F«©'\y^-*«£ < &#T"b«fc^) £K#g§£ft, M 
ACte«^fcg&2 1 {CA#£ft. Itr-i'liMD^ 
gB2 2KA7jSft*. 

[0 0 18] «^ftgi52 lTtt&IMM^'J 2 0(r*e> 
3M;«>IB.'ltSftT^*4iBMtKp U bii c £ffl<^ 
TMAC*OTftt5^tl:±t)MD16±)8T4. H 

private ttt, e^ft/i^iMatfe^T 

^7i65»T»5. —75, MDf^fiKSB 2 2 T(iA7j£ 
ftfcS^x-^ *^ A M$c& <*:©>?r5g©i€$:£ffl 
HTMD2ftt(jin. Jtfe-&gl5 2 3 TIJMD 

1 tMD 2 ttJt«UTW#*«-aba:*^fc*^J*tt 
7 7 -f 3 # t i D 3Sc« $ ft fc t W^T S d i 

[0 0 19] ±IHbfc^lllSS^§8{Cj;ft«, H^x- 

(MAC) ^f^fiicL, -©6S:K^ttfflx-^SrH#7 7 

*. dftt«to, ue*7-<;pASffl^T»«aftfciB« 
[0020] ac*«»fflx— ^sfPriETsfc*© 

pwt^vmmzfemzn&tz®, mmttez/s-Ftft 

[0 0 2 1] Jfcfc*£93©»2 2Qfi#l8iU-C, #ffl© 



ft KJ¥1 1-308564 



7 

[0 0 2 2] RT. H3€:#!igUT$^(ri¥ffltriJJBJT 
•5. 0 3(C*5^TBI1 tH- ©#8B#-St£#t" 5fc©« 

ts * 5 0 - 2 e>fc<55*S^ JHE»* ;* 5 1 0 2 K 

[0023] w^tf, v;^-H*as?bfct€rfc 
x— ^jWbam^u 6 Kaattsn*. -©^e- 

[0 0 2 4] if SM/*- KSIKLfcH^l: 

f 3 OfrA^^nT^SH^-^tcBif 

[0 0 2 5] &«lftlt ; &-F£S#IL7c»"&{C 

h. m 2 &#na ltwie l^tj^t^ y ?\zm a c 
unsnfca, 7?'fu>'yffH!iii3i:T77'fJHi 

[0026] sfc. estS^at-K^iK^nfci^i: 
fit (pc, efeffi^sga^t*) *»65i#snT7 7"f u 

ItT-i'HMACiliT-i'il^iSn, M^x 
— 9\t7T-i U >^fl?aW3&»e.MDf^J*«3 3 C:A77£ 
tl> MACtt«*Hfc»3 4KA7j£n*. MDfiMK«3 

public Sffll»TMD' Jtlfc— S 

g&3 2teMD£MD' t SJttfc LT— 4*»5j&>£*iJ 

its, aua^ofc*-&tttia«5 f -^*«» 

[0 0 2 7] ■fe + 3.7 ;: E-l 4 ttiB«'7 f -^*IB* 

»*cfl3ifr4t*t:ffl^e.n*. ^©li^tcte, 77 

-iVysfgWffil 3*>&Btlix-*#tt*ffl£*rrHM» 
ffcgB3 6 t'A2j£tt<5„ P&^fcgB3 ettifflllf'-^ 
^'J 3 7 £|3*£ftT^S#W«&ffl^T«f 

^13iCit^o £©&, £RJg#fll!f9&l 5 ©IMWfcJ: 
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[0 0 2 8] -fe + a.7^-F«ilfsiiI^$r^LT 

£ftTBt^-ft6B3 6KA7j£ft<5. B^M3 6ftu© 

H^x-^s-^Mtit^u 3 7 icfsesn-tt^^wi! 

1 4©«»KJ:t)a«|Hl»l 6S-frbTnSBS« (P 

[0 0 2 9] ±Ebfc«2lQfi»»JcJ:nfi, WAtf. 

7.^-yyiiI«*«5B#^«y--v;i/ ; E-h*Ttl»L. IE 

»B«£fc«fc©«»fei"*»£fc«3MW£« : E-- F, 

ISa©^- F &ffi*-&t>1*-S £ tT±IE©Si*^ 

[0 030] !^-F\zm4^mmvx^mm<Dm3mmm 

0 1 ©Jiff «^RZ>'0 3 Otlt- F©«fi££i&B§LT 

£-5. *^7S65 0-3€:*-r-55 i v f '5';HiE«!l*^7l 
0 3K:te^T, ««¥»6 0fc«fcT3T*^#£»«T5 

h£ife«8Ktt*HJ£nT, JPEG. T I FF5: 

t*roi¥©ii7*-V7 Mc^ns. z.niz£ 

'f;P7*-7yh«»MSn« (05© (A) ) o 
[0 0 3 1 ] mmz. I Cts- F$OT3B4 1 ©fWWcJ; 
D#*5g&5 0-3HS*SnfcfiABIEffl IC*-F 

-V<v F^g?8lrA73^nT, ^^^(CfiAlgsiEffl© 
W*A«H5<D (B) tS"r«fc"5lClE»$nS.'*fcMD 

AiSiEffl x- ^ JcM LT A >y -> a. HRd: £ ©Uf J£©H* 
*afflf*Ctt:J:t)MD*fP«f * (0 5© 
(C) ) . MAC^«1 1TB, ftSftt^^'J 

7) SflHr»TMD*ie^fc-r*CtK:J:OMAC«:fpJEdc 
•T-5 (H5© (D) ) o 'Nyyffi&gBl 2TI1 

;HiH5© (E) K*-f<fc 5 &H{£:7 hT77 
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[0032] ^<D&otm&77^ )im^mfcum%!> 
[0033] -rut>*>, estfi^tsti o 4tcg»^n 

ttttffl9l& 1 8 (DfflWIZ <k 077-f'J >#Vm.W 191: 
K*msn*. 7 7'fU>^ffIf Ii7r 
-f ;PA<M A C <t i!ljf2 b tz M A C £ 5 © fcj&g&x— 

-37 (^©ia^x— ^tcte, iii^x-^^-©*)©©^ 

J PEGtT I FFfCDA'^lfl^fetfeJ: 
RtffflABilJBx-*. tlC^-gfSn. MACBS 

^«MDffr£SB2 2 trATjSft-S. S^fcHSABEfflx 
-^«fiA1*#K*tBbg|5 2 2(CfeA^$n5„ 
[0 0 3 4] tt^tffl2 lTttiMMM^E'J 2 01;*?, 

*»C»E1*SnTl**4il8*!Kp U i,iic ^ffl^ 
TMAC^ffi^f-ffcT-SCtJCJcOMD 1 ^fiTTS. - 
73. MDffr£g|$2 2T«A73^nfcia«X— ^*^Ay 

tk«— »W2 3TIJMD 1 fcMD 2 i&Jt^bT 

w^-gcb&^o 3 #te«t o 3Sc*sft& 

[0 0 3 5] g-fc, flAW«»*tBb«4 2 TttfiAB 

5. civiT. fflj^#©W««, Hfftx-^rti&KSftT 
t^^c t'^5ss$nfe«-&t©*s«^*s. 

[0 0 3 6] ±EbfcJB3Hjfi»«C«tntf. Wmf- 

inrs^fxf, H«©3feS©*r»i©*-^e>"f» 

<@ABfEffl©t»#SibT. H^x-^tOAIgliEfflx- 
**£to-B-fcx*— :*J&*S» ffiEWf#fl:»£Jfl^TarJMft 
afflf-^&MLTl^CT, 1 ^©efcffl^Dx-^ 
T\ Hfcx-^C&fcilM^SoeABaiEfflx"-*©* 

Tfcw-ft«, flABiEffl7 f -^*»e.aij»#sr»ST# 
5. 

[0 0 3 7] £AT»C*»W©JB4||Jfi»ffiSlftWr*. 

tg^wr-5fe©tT5. sfc. ^:Ta0ioii»i 

RtfB3©fc«^— K©*j*S*IISbT^*a*. ens 

©««*«ATt»Tt>fit^ttt«J36T**. 

5 0 - 4 ^STSTy^Mft* ^ 7->XfA 1 0 51; 

*lr>T. Stt¥S6 0 CitaTft^ffSraHft-raetK: 

5. Hffe^'J 6*^llf-i'* ! 77'fil'7t-'77 
r«£*«8£R*HlSftT. JPEG, TIFFfef© 



(6) 

JO 

H^MSnS (170 (A) ) . j>:I;md^ 

•v va.|lS&&£©Bl f r/£©lll!££ffl^TMD 1 &5WiM 
D2 (07© (B) , (B) ' ) S^ritf*. IOMD 
1 iMD 2 titm~ ©fe©TaboT^<tt,>o MDlSiM 
ACffr&gBl lCAaSftS. MACfPfiggPl ltM- 

private Sl^TMAC&lrlbTMAC 1 

io £f£fitT-5 (0 7© (C) ) . ^©MAC 1 fci'Vy^ffi 

*»i 2 izmznz. 

[0 0 3 8] -7j. MD2(iI ca-FfWHaU 1 
LT. # ^ ^ 5 0 — 4 t;S#S tT.fc.fi AlgHffl I 
-NO" KATjSft*. fiABSEffl I ca-rMO' 

private ( I C*- h*) ^ffl^TMD 2 ^Rg^tbTM 
AC2£ffr«-r4 (07© (C) * ) „ ICMAC 2 
tt. I C#-F*J»«4 1 SALT'S yyBSBBl 2 (C 

20 [0 0 3 9] 'x-y^ESBBl 2TH, H&'V.y^'N;:, 
B^-y^'If^Wx-^iCin^-T, MAC 1 iMAC2 
<h£t&#rf<5. iftiCiD. Il7 7-fJHii7ffl 
(D) C*t±5ftB«7*-7iy K'7 7-f U >^ff 
SSBl 3 \Z<&M 2ftT 7 ft 5. 

[0040] £ ©i -5 fca«:7 r -r ;p^'f2ti^$ijpg|5 

1 5©w»K:«j:t)«^b"5iffiftEit«#i 7\ztm-zn 

0 6#ffll»5ft*. 
[0 0 4 1] 55:1^811 o 6icS«$ft 

30 fcEttHRttl 7tcE*SftT^*H<ft77-f;Utt, Ett 

mft$m$ii 8©$jw:ii9 7 7-f | j>^ffMi 9t 

M*tB£ft5o 

[.0 0 4 2] 77-f 'J >ift£mmi 9T11 Ii7 7^ 
JWiMACl. MAC 2 tWi^y"-? (£©H&x— 
t;«, lS#x-^-?-©fe©©ft&l;, JPEG^TIFF 
«©>\!yy-««S$ftTt>«t^) ttC^lt^ft, MA 
C 1 tttt^b«2 1 - 1 KA^Sft, ifj-^HMD 
^J5r£gP 2 2- 1 2*1-5. ffl^ffcgfS 2 1 - 1 T'fiii 

Mtt/^EU 20' t*6*»U«)E1t$ftT^*4iW«K 
40 public (*^7) 6ffll»TMAClS:StM5;tl: 

^ttKp r i Va te ttt. tizmt/mmmmiz 

feUT^JiftStffeS. -7j. MDMS2 2-1 
T'tiA^J 2 ftfcHflkx-*^ 6 A -7 "> a Hftft £©i?f J£ 

2 3 - 1T«MD 1 tMD'l * tSJttJ!bTil#*«— lie 

[0 0 4 3] EJWcbT, MAC 2««^{bHB2 1 - 2 
so tA*Sft, ■«x-^«MDfP^«2 2-2HA7JS 



!$KJ¥ 11-308564 



n*. a^b»2 1 2 o* k*& 

A»i;«>E*SnT^*4iBB«Kp U blic (IC*-F) * 
ffl^TMAC2^ftn^tlIJ;l9MD 2 ££fi£T 

3. &HttK pu blic (IC*-K) t»«ttK pr ivate 

dc*-F) tit. t&mt/vmoMmiz&KT^T 

[0 0 4 4] — MDtf^HB2 2 - 2TliA^$nfc 

MD 2 ' J#CC. 3 - 2TIJM 

D 2 iMD 2 ' iSJt«bTP#**-aUfct#t:ttii 

[0 0 4 5] ±IBUfc*4*Jfi»S8K«tn«, a«!x- 

inrrsdtT, a^escs©^©^^. a«*i^ 

flABflEfflOfiHBtLT. #*5fl-gB©i£BTffr£Lfc 

iyxfAt'ffli/^nTi^t? mzzfom-fz z t& 

[0 0 4 6] KTfc. *«W©SB5^JfiJgffiSWWr 
*. »5^Jfi»t8f4W^.JJ*-K, PCMCIAS-H 
3?© A- K ^ xT KTfif&L 7c * — S^tf— A*£fln>£ 

[0 0 4 7] fit*, X»7*-^fC»bTffl^e»nT^4 

titz if* E o £f JVr T * 4 «k 5 £ T 3 fc* t b T 
[0 0 4 8] -f ASfflVJ* 

[0 0 4 9] H8tt!FS5&K&£©'r A -> 7. 

fA107 ©AWtS^-TH"?* 0 , WAfiBI 1 1 KSf 
i^i:. Ava>i 07-ii. o 7- 

-A' 1 0 7 - 2 tA^ftfiJoSfrl*. 



(7) 

/.? 

[0 0 5 0] fiATtcSB5Hafi»a8©fPfflSH9 07n — 

as 7 2 a. $mm&mw%>7 i<Dmmiz£<omffi.Mft7 

0^£k 09© (A) &ot3.7*— h©H^ 

77-fMS!iT5. a&*ii«. ^SES«9 3^e>jim 
0*17 7*^UTa«iW«ai5 7 8©fW»fc«fcDSKiil« 

7 7-f^«flt5 (X^-yT'Sl) „ d©*-&, 77 

-r u >^«as$7 2 ->UT;py-^ 

Jk SCSI. I r DA^F©gi£i8T£fS:ttT*3< di 
>o TtfUSSHfr 5S« 7"f Xtit Z> Z\ tifl"C 

*«Afc«^T?*>iRi«oa»35«»e)n*. mac 

&f£g|$7 3«, 'J > tFBfmM7 2 *»6 Hilt 7 7 -I" 

;k€r§ttHoTMAC 1 SrtfelE-rS Uf7 7°S2) . 

yy4 , )>if^m^7 2itmmyr^)i^u 

AC 1 Emm?-? ElZftML. MAC 1 «a^-fta5 7 

5trA*$n. a*7*-^ttMDH2riEW7 6 \z\i3zn 
5. «^{t;gi5 7 5 7 4Ke*snfc&ri 

20 T-S>. Sfc, MDfl2/£^7 6liAy ViMI&cfti:©^ 
©iM^TMDl' ifctfc— IfcgB 7 9 

MDliMDl' t&it$rfZ>Z\t\Zj:Q. A^^Tffl 

* $ nftm&ifi* ©safest $ nx ^ -a tc nr 
[0051] assnxi^ni&ctt, w&yyov 

(i7 7^ U >2Hr3«7 2^&H**fiJltffi9 3\ZAt)2 

a'frfcn* Ut77"s3) o d©*^. m^yy-ov 

©rt$BBiSS818 2tC*^$n. 9 s 9 1 ttd 
30 ©aSS:J.i&* i e.'X-^A7jgfi (+— V«j7X 
m) 8 4 £^T#ffi©$aS©g*£fTofcD, x~ ^ 
£A7rr3o 8 3tta— tf 9 1 i-f ^-y-y— Al 0 7 
t©n— tf^f >?7i-XTJ5. ffi*B#©^M«^* 

mmimffl8 lizmmznz. mmz, mmmmmmm 

8 1(1 I C*-H«IHB8 5OW»KJ:0flABBEffl 
I C*-H9 2*»i6fflAIB*fiEffl©«*S*"«*UibT«J*4 

40 [0052] mm'&nmMyyvitMMmmof-? 

\tyy< U >^fl?a«7 2K2ie.n4©T?. 77'f'J> 
^**a«7 2««««ffi©W*S*H9© (B) ir^TJ: 

6) . Jt»bfc*^7S»fiT4***»-r*^ICtt, 

09© (O 1:^5^7*- 7 7 hxr^^^fffSfe 

[0 0 5 3] MZ. »*«©B«7 7^f;k>«*"Jlfll© 

T-^t^7 7-f U >^aBI57 2 *»6B<H7 7-f 
»rg|58 6©MD^fi)cgB8 7l:AA3nTAy>aH»ft 
so £©Bf£©HS&m>TMD2#ft^Sft*. *C M 
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ACffr£gB8 Stef&fciMtU 9 ok*&a»i;*cii* 
nrtis-r -;?+>-— a* i o 7 ©^®K pr i V ate <^ 

;* ->>+>-— A) &m^TMT>2&V&mktZ>Z.t.\Z&K) 
(Xr7^S7) . 'Vj/$ r flE*«8 
9 TteHWMAC 2 $:@9© (D) T^T.t'S^^*- 
hTH^^-y^lCfBS-r?) (7.x-^ys 8) „ 

7*»jt-rsw«&3»r*^Kttia9© (e) »c^-r«t 

•5&:7:i--Vy MAC 2#ttJn£n£iH#7 

{f fMiPSB 7 8©IMWKJ:0a«iaiR7 7*#LTnaBS 

19 3 \zm.z>nx&&znz>. 

[0 0 5 4 ] ±flBbfc*5*i(S»SBtJ:n«, 

x-*ffi*6*ffi«'BJ0ffll/©«k3fc, Hfl^-^OttR 
±&Efcffl3S«5l/r*>&*£fcSfc^. Sit, 

[0055] etfk:. *%w<Dm6^ffiMm&mw-f 

;tSPCfo±tEi3n5V7h'>i7l:TifSl/t 

■tJ— A©ft/MB©*lJ«£SjeT*. 

[0 0 5 6] 01 0(±'T^-> ; -y--A*^PC{C'r>7> h 
-JH/tifltSnS'f ^-^D-Av'^tA 1 0 8©1i 

[0 0 5 7] SB6^Jfi»J8-CttHi 0fc*-r«k-5t:. M 
ACf£fi£gB8 8£. fiJ^Kprivate ^fBitSnfc^^ 
gM^E'J 9 0 trt*. -1" *-i?-y—Ai/X'rA 1 0 8 ©1*1 
g|$T«ft<, </-^-/n 0 8JC»bT»KSfttt 

I C#-K 1 0 9 ©l*jg&l::g:tt 6*1X1^5. Sit. IC 
#-h*f&ITO8 5tt. -f^-yt-ny^TAl 08© 

a«7 7-f ;hs^tSB8 6 ' ©rtau-sstt^tiT^-s. 
[0058] mM'&<Dw®7 7'(}\'£mMmm<D ; T-5' 

titmmyr-(J^Sr^8 6 • ©MDf£jjScp|58 7 \z\~h 

fEfiS^ns,,- :OMD2BI C#- FfMii3B8 5 ©SMW 
K«fcD I C#-F 1 0 9©MACffr£gB8 8^i*5»n 
*. MACf^jftSI58 8ttMD2S»!6ilKp r i va te (I 
C*-h*) ftfflt»TlS^ft;bTMAC2*^-r*. Z. 
©MAC 2 (4 I C*— l*1B!W«8 5 ©WWKiO'Sy ^ 
fB@SP 8 9 £2*6*1X819© (D) (E) fC^T 

W,5mmmm(D^o\Z I C#- K l 0 9CIABtEfflff 



(8) 

[0 0 5 9] ±KUfcJB6*tfi»IBt:«fcn«, B5*Jg 

»fls©sa*jcinAT. Bt*<b»©flf8tinp^k©«iasr 

1 C*-H©J:3J&:»liaaftfelfi1tttE(*:Tfllj«U, IB* 

■7i7T«t?>±^IlrcOT', <&37x bX-f 

[0 0 6 0] #Tfc#SB0J©*7*tt#»£W9i-r*. 
*7HJIS»»B!Sl^b«IIJt»- SSk^T^AtHL. 

&ft3«&^fc4:UX©»«»£«#fcil£LX©&H«l 
tttHl3 (A) tc^-Tct^tr, /-*-tJ:t), 
^M^52 2 0H/-y't)-A2 2 1 1 IC*— K 

2 2 2&£©&B©S&i$fctt£j£»IRi 2 0l:«kt)t 

g®M£, i©»ffi*ttit-6fcft^t3*g|**ftTiB* 

[0 0 6 1 ] &H«ttfi«fcBW©MWM : P<!:L'T 

20 ©v'JT^S^t^JSS-tiTEIl 3 (B) (C^-r^P?l» 
•y— A** 1 1 0 ©gtSHtgB 2 0 2 fc «fc D EfltJItt 2 0 

3 {CBHtSSns. 

[0 0 6 2] ©cg^ftSS. -f^-v-y— A©4iHMMt 
# • Sfilfllffl 1 1 1 fiimZ-titri? 9)1**7 2 2 0 Ci 

&BMMS11MB2 1 2*»6S«©->'J7;W#^**a«ftlW 

3& 2 1 1 . ilftHigi 2 1 0.2 0 9. SftSflffllgB 208 
*^UT««3R«J2 0 4t2l«*nS. «&SjgB2 0 4 

ttS«©->U7;w#^K»*S'r*^ii**Ett«#2 o 

30 3 7&»Stt*fflLTMDffr«B&2 0 5fc2t4. MDffrSfiB 
2 0 5 IJy \ y v'aBWOfSOHft* ffl HTMD* 
f£LXMACffr£S$2 0 6 MACf^J*ffl5 2 0 6 

ttSHfctt/^EU 2 0 7fc*&**D«>IBttSftX^5«H6 

208. mmmm 209. smuts 210. aftawgu 

2 1 i«tfLT£BMMM»fB2 1 2 tciH^o £Htt%& 
$2 1 2tttt#Lfc&W«£g«©->U7;U»'#iS& 
nttSft%2 1 4tcM4= 2tBBft3It$2 1 4ttMitttt 
BB«t8«©-> , J7;U##t^BJ«> ; EU 2 1 3 MS 

40 g-fS. 

[0 0 6 3] PIB$t. 4*Httft&ffi2 1 2*»&4MMt© 
■r— ^*«MDf^J««2 1 6t, MAC*Ut*»fl;W2 1 7 

©MISSfflViT^W^MIi©^— ^A^MD^^-T 
4. W.mtffi2 1 7tt4iHtt> ; EU 2 1 8KK1f£nT 

i^mwa-y— A©^MHK pub iic (nea-y— a*> * 

m^TMAC&mmk?Z>Z\£lZ£lOMD' Sf^ricT 
-5. Jt^-Slg|52 1 5ttMDtMD' tSJtiiUT— Sfe 

so K«iifg ^ gT?# 6nfc*/7^>-y*- A*©ii w 
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[0 0 6 4] &HJ«U— A' 1 1 0 tllg^tlT^ 

©-> U TJi-S^SSI* - fCBlWr* ~ £**Ttr *. U 
* £ d j&» T &@t£*nffl x - * * & £ £ **T * 

3. • . 

[0 0 6 5] £tTC**W©3B8||Jfi»!ISIttWr*. 
W. 8 &tt&ffitt£fi#*£B&©3dKI&iI: K Hf * *> © 

i«+3.^>h7r-f jus— asasgbfc«-&, 

{fc^-^ttftfttt-tfSS^&ft. #?«ft©^IE&£\ #4> 

gfc»#j&«poT^*fc*, &£&«#©*&*» 0 tab 

&V» ££3**. a#ttaKB6±ffl<>-^ 

ft tt in L & < t« 5 & ^ . 

[0 0 6 6] -?-ZlT. ^8HSg^T«> ±B©HH« 

1 4«*5S^O*8*l6»J8©«J***-rHT»S. -5* 
i?^JH£S!l*^7g6l 1 2C*t>T. Iftfg6 0l:± 
D £««T<5> z. h \z «t B ft 5 ftfcBfcx- * fJH 
flM^E.'J eicBttan*. ^^©Bfcx-^ttBfMB 
/hf»3 o oKX^snr. «ftas©#&ft©Btti;:£ 

&£n-g>. £©££, a-tf#MACm£*«£}f3S« 
3 0 2*ai;TS«i*«BEbfc(ri*/h©*«fl[*jt3£-r 
S£, ^WT'f U i»l 3 S^l/TMDM 

35 9 CSs^n-a. MDfiM£«9T?tt/\y>':i.|l*fc£*© 

[0 0 6 7] — ffcffiiMt'J 1 OCtt, 7J*^EI* 
©f-^^t'J 3 01 {ClBtt^tlfc^^^S*©^-^ 
t, I C*-HWIIffl54 l©*J»t«k»3flABKffl I C 
#-K4 oa*5tt*fflbfc«ABjEJB©««£a»&ffr£ 

d©»ffi*Sffl^TMD^«9T?fPriESnfcMDSB» 
^tLTMAC5MLT77^ 'J >^flf9»l 3 \zm 
Zo 7 7-f'J >^«SgP 1 3 tt£SHl£©filtt&©Btt 

x-^*i"p©77-r;ncst», £<=>fc±fe©j§5t£ 

nfcfPiftS©^-^ 5 f£fiE L fc M A C £ M$ Sitr- 

1 7 icfiurr*. 



(9) 

/<? 

[0 0 6 8] 016 a*iWfflitT-^ 

i:t?^TRfH"r*fc«)©aTf»s. 0i6ir^-r<t5 

fc. 6fi»«a^©«»tt*6* i U«>ai£L 

^SCKlt^ffiBE-r^^ft©^-^^ 6M A C 

U iftr-3'0^'y^Sft:(iS l JOMACSl77'fJl' 

[0 0 6 9] -75, afeSE^SSBl 1 3TB, 
f&OTSBl 8©ftOWfCj:t)iB1»«<*l 7j&»6MACfttfB 

77^f U >^ j ffS^9T«MAC€:«-^'fbg|5 2 1 ir. iU 

my*-?*wm*± i ) 3 o 3 teats. mmm2 1 -en 
htma c zmmt-r?) z. £tmd i £fN£ 

f*. St^tU 3 0 3 fCffitt^tlfclBftT*— ^ 

ttBtttt/hffi3 0 4T?3f3£©IB/h*»T*S/hSnfca,. 
M D fpj«« 2 2 1 31 6 nT A y -> a. Hfttt if ©0f ffi © H 

gc£ffll^TMD 2Aiff(S3n5. — SfeJt&SS 2 3 TUM 
D 1 tMD 2 £SritR-rs^£H«fcOH^— ^^efeffi 

20 [o o 7 o] artcHi 5*#flauT*^w©ss9Si*fi 
»s«#u ifi-D. #w*fli©aifttt-s-y--f x©/j^ 

D7i'^#fiibTfe»§nTV^It7t-'7 7 b© 
3fcSt£B&jtT££££:§:0LTH5„ ^©il»7*--7 
•7 hT/h^ay^S*ffi£L.T»ittUTV^aSfi, Pi 

[0 0 7 1 ] xS^USESfcfc*^ 1 1 4©fPflittJtlBL 

r^v^)vmmti^y 1 1 2©^ffl£iwii;-c&3fr\ ^ 

©3*iMS»llTttB«lt|/h • ^fiSB 3 0 5*tU Z.Z.T 
so «3fc©«p*K©li«*ffj«f SttfeC. HI 7K*f 
<t 5 {c — S © A * 5 © 7 n >y 9 m% \zm^ & ^»JT * . 
7 7"f U>^«affll 3TI1 §/h7"D7^«l:MAC 
*f^fi£b, /h^n-y^SW^^^tCMACS^^jAtJ 1 . 
MAC##©B«7r--( , ;i'ttlE»«H*«IW»l 5©$IJS 

[0072] a^Bt> w»<Dm%t&m£ft*M»mifi& 

mtt^3-—*¥lZ* ^©PCl 1 5rtTlIV7h , 7i 
T 3 0 6 Srfijffl LTfB1*!«.ft: 1 7 *»5«*Hlb&tU v 
40 7^;UH#^ €.^S3ft»»©«1 0 Hi b^5fe#««©B 

X\ *f*««:£***^7^-^ 3 0 7 tbTBfftiiJR 

953 0 6trA^-f-5o 77-f 'J>i/flFaiBl 3T1J, *f 

js-r-g><s#ft©H«^^< *f^-r?>'fis©ia«^P-7^ 

[0 0 7 3] efe®^»S«l 1 6SCcfcD&ffi£&*-r3 
£*lctt, Ettltt^fflffffil 8©«»K:«tt)IB1tttff 1 

7 % 7 7 -f u >2f eas i 9 f'iH*^*ia^&K^i±i 

T. BWWft»»3 0 8T»4«*»*B*lC?t#l/TBW«ft 

so 53]j&*fT*>n-5. i©£^. fctt)t/h7'07^«l:#a 
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17 

% nt^fcM a c © * s m l ^ y r -f ;k-#jp lt 
— tfttH«lcaE»tt*»fci3:fc**, nns©»«-w & m 

*. 

[0 0 7 4] fcis, ±EUfc£#«^JttJ§J!Bk:ttJeAT© io 
J:3&#lf£©5B9IA*£SnT^3. 

^TffiEesflUftflJSx-^sft^ftiu ^rott^-fbote 

)mm<D mum. 

tO 0 7 5] Sfc, Bfc*«»ffl7 i -i'£ffr* - r*;fc#>© 
^ffrsfct" •Sfc&CDIIf-Sf'ffc&lte. 7 1*31;: 

2. SfltBBt^ffiSgBtt. iGEPffcx-^lCBfJEOHft* 

-rant ic«t o me&k^/b^-* sf^*f* - £ * 



4. ffiEtt^&affitt. fflEWf#{b*£. fiABEfflf* 

*»at'ra*j«iE«©7 f > j ^JHE»*^9->^5 i 

A. 

«ABtEffl©««t>wiwr*c:tT?, Bft?©&s;©*r&s 

ftfcsmvrm ©3fc*«»ffl5*— wish 
tMfflf-^^MLt; MiB«i&^2©^a^ 

■*»«fr*«l*4E*©7 i ^^;HE»*^7^X7 1 
A. 

(ftUBSft*) jS*rr-***&ffo*Lfcm©Sfc^tt/fl 
■x-^t. »«#©flA«ffifl!^-*a»5fft5fcUfciS2 

Tffll^5©T, WE^2©*«ftflIffl5 f — ^sa^^- 
Jl^WP £flfi©1ff ty^fATi l^ftt^S 

6. |&EflABffifflx-*;RtftaEi*^{b*£E«T5 

E**t, it}fMABglEfflx-^6Sg2©&Kt&*nffl 

7 i -^*^riE-rsiS2©iiff^«iaa5t*«A, ^©we 

ft 2 ©«^fflaflS«frEA * 5 fc2*LT*Ke«EK*ljS 

yXrA» 

<flUH$&*) fflABffiffl^-^irtMMbllfcEtfcU % 

2 ©B5cs^»fflx-^ fcflsjirr a* 2 ©«re«ia«&, 

jtZ.LT* ^ ©«#*»* bT^tttf, *ftfiJfflLTl» 

aix»«bfc«{ft©a*©^rMsaiB-rs;:t*«Tfr 

7. MrEHF^ffiafK». SdEHiftx— ^tWEflABStE 

TiltrEiSK*»ffl'r-^*^-r*;:i*»*fr** 

(fPfflJSl*) *i^#©<@AlgmEffl©1f$8iL.T, Si^T 1 
-3'4:flAIBEffl'r-^S^t>-ttfcx-^*»6. WE* 

icte. i •owefeSE^x-^T. latfex— ^©efestai 

*if©flABKfflx-^©BMK*«ittT#S. »S?#© 

8. *>^7fcJ:0^^¥ft:*^i#UT^#e>n/tH#T ^ -^ 
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ViTffilHBMMft^fflx-^Sftt^b. £©«#fls©i|g 

*x-*fctt^*lf#fc£fTfc'3-fe*3.7 ; E:-h*£, « 
L^-^ SB*?*-* fc«$!>&tra^>§fr l^- 
Kt, ^*iU?>f*flB*«fr1i:fc^T3I*©«#£fT 

* =rr * ^ t * #m t -r * 5^ 9 jmmti * 7 -> x t- 

A. 

ffiS^-F. ¥ft^£^0fc^B*fc*#LTtt« 
-?if rt^^E- FT?«#T4 - itfff*^t§ d £**T 
3 tte«©ffib>Btt£3ll$U It7 7^f 

9. S«JCH#©»8iJ^t. ^©itSU^K^LTtoS so 

anfcjg 1 ©«MHb*fc:*fj6"rass 1 ommmt 
fc-&Tffi*-r*a^bttaE«»t, i»ESsi©«^b* 
fcHT*akKtt»ffl5 f -^a«2©i«^{b«^^T^ 
jsu ^©acKttttffl^-^tWBESBiwfic^bat* 
to-&Tm*-ra*^fl;iini*ajt. £ffi*.fc«^bn+r 
- a* i , aaE«#fb«u— /n*^ % mm^mm ^bT® 

t, iaas*2©i«^flstiK^*rssB2©a^fl;«n£ffl 
*s*»c»tJt»Ti»ejis 1 ©tt^{b*a*3Mfcsn&j&>5*» 

Ac 

(ftUSSft*) *5SWC«fcn«, &«&»fflx-*©«^t 
^-^S^ffT-Sit^T^-Sc so 



10. H«x-*©Bic*Sfc*irf Bfc5*- 
3'©«**ffa , 5 7 f ^i';l'H*««->^5 t AT»oT. 

nfcfBl ©BHWftfcUHx— 

■ttftifflx-^sffriE-rsistffl^fcBiWbtttc^nE-r 
sa^b«*ffl^Ta^<btsit*>fc. £©«^£n 
fcmi©*«*»ffl5 f -3'tfl(HBiB«7 f -^t*ittt-r 

«£, MEB*7*-*£*fu #a©a*«ia*«rra 

tiM6£ffi£. g0EB«IB*S££?T#aBtiM!ia&ft: 
3 ftfc^»*B«^-*£MEBIMra«fc: 
iifflf-?*^, WE«f^-fb*£fa»j©it^<b*sffl 

ViTJB2-©Sfc«R»ffl5 i -^*fPfi!tU, ZLftSMEIB* 

*»fr#T&*#»JBx-**flMfeL/T^*©T. 7U© 
@H§! lc # L £ © <fc 5 3 *««S SnftOA>S tBT? 

11. WEHflii7 7 'f •5 f 5?^;nitfi«*-> 

fltfE»J©«HHb«£Ettf* 1 £ t>fc, AftEfiABSEffi 
*K:taC35iJ©«f#fl:il*ffl^TWffiS82©3k«ftttffl7 f 

<flus3&*) «f^fl:«©fl?a£«f^b©fiia!sic*-K 

©«fc3&*KBffifcEttttM*T, Pi«©iffi«^>iB*BM 
x-*©fNi&£©fll©*flB£V:7 h^x7T'«T5 
££T\ fiax hT-f^-v-t)— A*£8l&T€f*. 

12. MfBli*«ffi(reAiStE1f#g^abt)1±TtBSLfc 
£ k&ftWlt-?Z>ffij$. 9 E*©5 i ^^;HMft»j6v'X7- 

a* swjrr* 

13. MEB*A*«tt. *fflE*«E#K:EttSnfcB 
I r D A) , Xtt. a«lHl**^bT»tt-r*^ 

tcfcOA^-rs^t^wat-rsfliritSE*©^^ 

•>'J7;^-^K SCSI. IrDA^Witgg^WST ^, 

14. MEBft^-^tt, #«ar©St»KSft<5«»© 

Bfftx-^satbTEitbfc^afPfflfcaBifcx-^T 
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15. mifBs^-^a. #f««©svwcaa:*ai»o 

H^x- ^ ^fflir b TIE* b fc££#£&B fST 1 - * T? 

ctidio, #/B©ir— /\*£ffl;t-f s;r£ft<. -soft 

[0 0 7 6] 

B»©ttK±&Eifc3ffiSH , «*W 

jpbb © mum ts £ «t * x v 5 ^ ;ub«»* ->x t- a s 
[Bffi©B¥&K9JJ 

[01] *5BWO»l*lfi»ttlC«*x^^aE**^ 

5vXxA©JSj££;*;T0T£>.5 < , 

[0 3] *%Bj0^2*ifg^ffi^«S^> 5 i5';HiE«l*y 

[E4] *mw<n& snmMmz&ZTis? )mm* * 

[0 5] Bfftx-^fceABKfflx-^tMAC^HO 

$n-5*T©^n^^-r0'c ! *-5„ 
[0 6] ^mm<D^4^mmmiz^^ ; f^^)ummti^ 

[0 7] a#X-^lCMAC l&tfMAC 2*«f=tiDSn 

[0 8] *5gwoi6 5^1fi»JBt:«*-f^-5?-y— 

[0 9] S5HflS»l80ffffl*«Wr<5fc»07P-^ 
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